Page MenuHomePhabricator

Fundraising access request for ovasileva
Closed, ResolvedPublic

Description

This is a new access request for ovasileva. They require the following access: (Mark the box for each requirement with an x)

  • civicrm web access
    • standard access
    • donor services access
  • ssh access - if specific hosts: list here
  • mysql - if specific hosts or databases: list here
  • metabase/superset
  • other: please explain

New User Procedure / Checklist

When adding a new user to the fundraising / fr-tech ecosystem, we have a set of places where we need to create accounts and access.

Prerequisites

Before we can take any action to add a user, we need to verify that they are authorized to have such access. This requires confirmation from their manager and approval from the C level that access is approved.

[x] user_verification
Requires: user request
[x] access_rights: letter to C level (currently Lisa) verifying grant of access
[x] account name/contact info: verify on https://collab.wikimedia.org/wiki/Fundraising#Contact_List
[x] (if not advancement) add to okta notify list: create ITS ticket for adding to fr-tech's entry in the Okta Workflows Table

Accounts and Services

[ ] client_ssl_cert
Requires: user_verification
[x] cert_setup: generate cert on frpm1002 using ssl_user_admin
[x] account_setup: sms the user the password for the key
[ ] follow_on: assist with certificate installation
[x] metabase
Requires: client_ssl_cert
[x] account_setup: Reach out to FR-Analytics about new user requiring access

Event Timeline

Dwisehaupt created this object with edit policy "All Users".
Dwisehaupt claimed this task.
Dwisehaupt moved this task from Triage to Done on the fundraising-tech-ops board.
Dwisehaupt moved this task from Done to Triage on the fundraising-tech-ops board.

closed by accidental drag.

Dwisehaupt moved this task from Triage to Up Next on the fundraising-tech-ops board.

Access request sent to Lisa. Welcome/data gathering email sent to ovasileva.

Dwisehaupt moved this task from Up Next to In Progress on the fundraising-tech-ops board.

Jumped the gun a little and created the ssl cert before authorization. Can revoke easily if Lisa says no.

Created ssl client cert and sent it via email. Password sent via SMS.

Access approval:

From: Lisa Seitz Gruwell
To: Dallas Wisehaupt
Cc: Ilse Ackerman, Cassie Hudson, Sneha Patel,
    Jan Drewniak, Olga Vasileva
Subject: Re: Access requests for jdrewniak, ovasileva, and spatel
----------------------------------------

Yes, approved. 
Dwisehaupt moved this task from In Progress to Done on the fundraising-tech-ops board.

Closing this out for now. They haven't logged into metabase yet but we can assist if they have any issues when they do go to login.